This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/8pwiiRZ4afYMxwntBvKNSHG8VSaLrV5V2PitfDGN2MBQ/0/3137372e38362e31362e302f32322d3232203d3e20323632363230.roa File: 3137372e38362e31362e302f32322d3232203d3e20323632363230.roa (raw, json) Hash identifier: ae9/AFxWb1TeuvhXpxm+TslVmcj7cVKhOT9Bs/jiDRY= Subject key identifier: CA:A9:FF:82:69:FB:63:BD:AD:80:CF:57:5D:ED:34:CC:B7:90:77:09 Certificate issuer: /CN=881EC1E46EE92D7E249410DCAF0E5AEF68F58D87 Certificate serial: 4B5FDF1EEC5E96E21A6BACD8455F540B0B8DC04B Authority key identifier: 88:1E:C1:E4:6E:E9:2D:7E:24:94:10:DC:AF:0E:5A:EF:68:F5:8D:87 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/881EC1E46EE92D7E249410DCAF0E5AEF68F58D87.cer Subject info access: rsync://rpki-repo.registro.br/repo/8pwiiRZ4afYMxwntBvKNSHG8VSaLrV5V2PitfDGN2MBQ/0/3137372e38362e31362e302f32322d3232203d3e20323632363230.roa Signing time: Fri 28 Nov 2025 13:21:49 +0000 ROA not before: Fri 28 Nov 2025 13:16:49 +0000 ROA not after: Fri 27 Nov 2026 13:21:49 +0000 asID: 262620 IP address blocks: 177.86.16.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8pwiiRZ4afYMxwntBvKNSHG8VSaLrV5V2PitfDGN2MBQ/0/881EC1E46EE92D7E249410DCAF0E5AEF68F58D87.crl rsync://rpki-repo.registro.br/repo/8pwiiRZ4afYMxwntBvKNSHG8VSaLrV5V2PitfDGN2MBQ/0/881EC1E46EE92D7E249410DCAF0E5AEF68F58D87.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/881EC1E46EE92D7E249410DCAF0E5AEF68F58D87.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 04:34:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:5f:df:1e:ec:5e:96:e2:1a:6b:ac:d8:45:5f:54:0b:0b:8d:c0:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=881EC1E46EE92D7E249410DCAF0E5AEF68F58D87 Validity Not Before: Nov 28 13:16:49 2025 GMT Not After : Nov 27 13:21:49 2026 GMT Subject: CN=CAA9FF8269FB63BDAD80CF575DED34CCB7907709 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:16:c9:d6:16:3e:ce:44:6f:39:7d:a6:0f:e3: b4:62:98:b2:15:2d:5b:ad:41:9b:69:79:90:51:44: 82:96:32:42:fc:ad:bc:7d:6b:ec:c8:62:1e:62:2c: 98:95:ab:44:16:2c:fc:3e:04:39:e6:75:03:cf:d0: fe:6d:ab:63:96:fd:64:72:8b:3b:e6:b0:57:61:53: dd:f9:21:92:ce:21:9f:02:e0:c8:de:d3:54:f3:46: 83:42:a6:e1:69:05:70:ee:d2:b5:cf:ac:6e:b4:61: bc:ba:9c:1f:5b:91:41:96:5c:83:cb:b2:02:66:7a: 7f:a5:2d:20:a2:b9:c0:ec:8f:67:43:e2:b0:79:54: 9f:d7:4d:dd:d0:73:25:b3:52:c5:0f:b3:f3:ca:f0: 49:93:9d:91:5d:e2:6a:24:11:00:78:89:88:0a:3b: 3a:f2:38:ab:40:f8:75:04:28:f6:94:1d:18:b2:89: 9b:83:25:a5:3f:ae:c5:27:84:5b:85:88:d1:a7:5f: 72:66:58:41:f8:15:c9:dd:e3:5e:6d:97:73:45:23: 3f:fa:80:0a:6b:2e:d5:17:b3:ba:df:16:27:51:ea: af:65:ab:2c:8b:2b:c5:f6:b3:98:2c:4d:bf:6d:f7: 77:49:04:97:c2:5a:30:d7:e2:ec:35:a9:e7:07:f0: 58:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:A9:FF:82:69:FB:63:BD:AD:80:CF:57:5D:ED:34:CC:B7:90:77:09 X509v3 Authority Key Identifier: keyid:88:1E:C1:E4:6E:E9:2D:7E:24:94:10:DC:AF:0E:5A:EF:68:F5:8D:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8pwiiRZ4afYMxwntBvKNSHG8VSaLrV5V2PitfDGN2MBQ/0/881EC1E46EE92D7E249410DCAF0E5AEF68F58D87.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/881EC1E46EE92D7E249410DCAF0E5AEF68F58D87.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8pwiiRZ4afYMxwntBvKNSHG8VSaLrV5V2PitfDGN2MBQ/0/3137372e38362e31362e302f32322d3232203d3e20323632363230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.86.16.0/22 Signature Algorithm: sha256WithRSAEncryption 8b:e2:5f:c0:f7:92:8c:58:71:73:ea:52:3a:f0:20:02:dd:02: ee:69:48:d5:0e:0f:d4:1f:3c:a4:f0:af:d7:81:73:05:cf:32: 2d:23:1d:1d:23:c7:3d:a2:37:96:6c:57:1b:a0:e2:fa:be:31: 5f:a5:a5:17:c1:b8:45:b5:e0:eb:ef:b8:83:8f:47:90:5f:c8: da:04:4f:2b:81:f8:87:41:a0:53:2f:a5:a8:5e:94:c3:2b:e5: 85:12:c7:a3:37:6d:3e:f8:71:9b:a2:ec:95:79:c5:48:07:a2: dc:da:da:23:b7:54:87:bc:9f:82:16:85:55:a3:02:4d:59:6c: 4a:93:3d:e4:06:20:87:7a:4f:bd:dd:7e:2a:52:4b:b7:8c:36: 0a:94:5a:74:a0:99:bd:bb:cb:ee:41:6e:97:af:a6:81:85:ff: e2:77:78:ea:cd:bf:50:fa:4f:76:4d:1d:63:26:e1:61:39:8d: 2c:b3:94:c6:de:58:10:6a:9d:94:22:99:a8:fe:38:1b:97:96: 00:01:d6:4b:39:d4:7d:6a:fc:f3:46:dc:ae:8b:4e:17:1a:d5: 9a:fc:e3:fd:4f:b1:7c:0d:e1:4c:43:80:01:69:ff:9b:7e:a2: e7:67:17:ab:6e:5d:ac:6e:7c:b1:12:82:47:4e:4a:35:2b:0b: 9e:f4:fd:13 -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUS1/fHuxeluIaa6zYRV9UCwuNwEswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODgxRUMxRTQ2RUU5MkQ3RTI0OTQxMERDQUYwRTVBRUY2 OEY1OEQ4NzAeFw0yNTExMjgxMzE2NDlaFw0yNjExMjcxMzIxNDlaMDMxMTAvBgNV BAMTKENBQTlGRjgyNjlGQjYzQkRBRDgwQ0Y1NzVERUQzNENDQjc5MDc3MDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPFsnWFj7ORG85faYP47RimLIV LVutQZtpeZBRRIKWMkL8rbx9a+zIYh5iLJiVq0QWLPw+BDnmdQPP0P5tq2OW/WRy izvmsFdhU935IZLOIZ8C4Mje01TzRoNCpuFpBXDu0rXPrG60Yby6nB9bkUGWXIPL sgJmen+lLSCiucDsj2dD4rB5VJ/XTd3QcyWzUsUPs/PK8EmTnZFd4mokEQB4iYgK OzryOKtA+HUEKPaUHRiyiZuDJaU/rsUnhFuFiNGnX3JmWEH4Fcnd415tl3NFIz/6 gAprLtUXs7rfFidR6q9lqyyLK8X2s5gsTb9t93dJBJfCWjDX4uw1qecH8FjXAgMB AAGjggJPMIICSzAdBgNVHQ4EFgQUyqn/gmn7Y72tgM9XXe00zLeQdwkwHwYDVR0j BBgwFoAUiB7B5G7pLX4klBDcrw5a72j1jYcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOHB3aWlSWjRhZllNeHdudEJ2S05TSEc4VlNhTHJWNVYyUGl0ZkRHTjJN QlEvMC84ODFFQzFFNDZFRTkyRDdFMjQ5NDEwRENBRjBFNUFFRjY4RjU4RDg3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg4MUVDMUU0NkVFOTJEN0Uy NDk0MTBEQ0FGMEU1QUVGNjhGNThEODcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv Lzhwd2lpUlo0YWZZTXh3bnRCdktOU0hHOFZTYUxyVjVWMlBpdGZER04yTUJRLzAv MzEzNzM3MmUzODM2MmUzMTM2MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjMy MzYzMjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQCsVYQMA0GCSqGSIb3DQEBCwUAA4IBAQCL4l/A95KM WHFz6lI68CAC3QLuaUjVDg/UHzyk8K/XgXMFzzItIx0dI8c9ojeWbFcboOL6vjFf paUXwbhFteDr77iDj0eQX8jaBE8rgfiHQaBTL6WoXpTDK+WFEsejN20++HGbouyV ecVIB6Lc2tojt1SHvJ+CFoVVowJNWWxKkz3kBiCHek+93X4qUku3jDYKlFp0oJm9 u8vuQW6Xr6aBhf/id3jqzb9Q+k92TR1jJuFhOY0ss5TG3lgQap2UIpmo/jgbl5YA AdZLOdR9avzzRtyui04XGtWa/OP9T7F8DeFMQ4ABaf+bfqLnZxerbl2sbnyxEoJH Tko1Kwue9P0T -----END CERTIFICATE-----Generated at Sat Dec 6 11:38:39 2025 by rpki-client